PT-2020-7495 · Unknown · Opwebapiplugin

Kousuke Ebihara · Published 2020-02-07 · Updated 2020-02-11 · CVE-2013-4334

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: opWebAPIPlugin versions 0.1.0 through 0.5.1

Description: The issue concerns XXE vulnerabilities. No further details are provided about the nature of the vulnerabilities, affected devices, or real-world incidents.

Recommendations: For opWebAPIPlugin version 0.1.0, update to a version that addresses the XXE vulnerabilities. For opWebAPIPlugin version 0.4.0, update to a version that addresses the XXE vulnerabilities. For opWebAPIPlugin version 0.5.1, update to a version that addresses the XXE vulnerabilities.

Fix

XXE

Weakness Enumeration

CWE-611

Related Identifiers

CVE-2013-4334

Affected Products

Opwebapiplugin

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2013-4334 · Security Note
• http://openpne.jp/archives/12091 · Patch
• http://openwall.com/lists/oss-security/2013/09/11/6 · Note